Threats tagged 'ghsa-m25x-x7gp-8wcj'

A prototype pollution vulnerability exists in @progress/kendo-vue-common used by Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0. This flaw allows a high-privileged attacker who can control a field path processed by components such as the Scheduler to modify the prototype of built-in objects. The impact is limited to confidentiality, integrity, and availability.